Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203577.roa
File: AS203577.roa (raw, json)
Hash identifier: nZQMcLvsIptxu2Q4MndRw3lqRbsQ8oDxeCiCknxAUyI=
Subject key identifier: DA:CB:60:61:DE:BC:21:4A:CC:65:36:BC:6F:AD:56:54:C8:21:0D:2F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2A958868035C0A496EA940BF50B281BE4FB342A5
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203577.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 203577
IP address blocks: 2a06:a005:2020::/44 maxlen: 48
2a06:a005:2030::/44 maxlen: 48
2a06:a005:22c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:95:88:68:03:5c:0a:49:6e:a9:40:bf:50:b2:81:be:4f:b3:42:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=DACB6061DEBC214ACC6536BC6FAD5654C8210D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:26:54:01:6c:13:c8:c9:c1:c8:20:58:19:
be:ae:88:6b:6d:a9:8f:81:65:98:43:ab:bc:69:37:
e8:f8:d5:fc:fa:60:f5:98:a1:52:10:42:c4:d2:d0:
c9:63:94:29:90:5f:22:01:a7:72:07:d6:27:2c:26:
c7:c8:f4:9b:d8:f8:25:f9:95:3b:73:dd:2c:6e:b1:
9c:a1:00:ca:56:ea:81:0b:bd:c8:c1:75:e6:44:68:
7b:21:19:9d:4a:3d:10:4c:19:e8:4e:59:44:0e:66:
65:12:33:ec:98:91:e8:97:5d:0f:90:81:9d:90:df:
0a:8b:1d:fa:89:d4:01:b6:f6:a5:c1:05:e7:19:49:
d1:bb:5e:11:76:a6:ef:1d:c1:d8:04:ce:99:bd:ea:
04:5b:77:cf:ca:a2:bb:1f:cc:3b:79:0a:c3:53:d6:
6b:59:8f:3e:47:79:48:19:6d:27:43:b9:6d:97:8e:
fa:c0:23:48:c2:8c:02:25:99:8b:8f:eb:35:2d:11:
87:15:a5:d9:ab:e5:83:86:ca:f1:8d:f4:b0:09:df:
f0:61:48:82:20:25:75:cd:5f:87:26:50:28:8f:e2:
a4:2e:b1:11:c9:c3:0d:9c:da:2e:22:ef:fd:6a:15:
e6:39:cc:1f:29:44:08:1a:99:9e:b9:78:ab:e7:4d:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CB:60:61:DE:BC:21:4A:CC:65:36:BC:6F:AD:56:54:C8:21:0D:2F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203577.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2020::/43
2a06:a005:22c0::/44
Signature Algorithm: sha256WithRSAEncryption
7a:87:3e:09:a9:1c:ff:ad:28:7b:ab:e3:f4:95:11:2c:e7:43:
c6:25:2b:9c:cd:91:36:f4:cf:ff:ca:36:5a:bb:fa:e1:1b:f0:
9b:5f:e9:a8:41:16:27:53:4c:dc:8f:fb:18:d7:e7:6b:49:48:
05:74:14:89:b8:2e:ab:8b:24:e0:52:d1:23:fa:ac:17:b2:5e:
ae:e8:44:e4:e4:60:3a:28:88:a6:40:d0:8e:61:af:80:c7:44:
92:4c:e6:6a:25:8e:6a:0e:a2:bb:fa:d8:54:4a:79:33:a0:2e:
2f:f3:af:27:d8:b9:be:06:cf:44:4a:f1:2f:49:a4:e0:30:48:
f8:a4:22:b6:1f:02:88:94:a8:0d:1e:3b:db:2a:c5:43:17:ef:
71:00:bf:5d:eb:1b:d7:97:74:57:26:ca:b5:3f:82:3b:89:42:
98:00:67:e4:09:5c:88:d3:21:25:59:38:fd:1e:66:5e:b8:b5:
82:56:00:6a:9b:34:49:28:3c:a9:f1:67:51:17:b5:96:38:cb:
66:b3:a3:f5:b2:dc:7e:d2:e2:05:c3:35:0f:8f:52:2c:77:aa:
63:41:cd:1d:e1:12:9b:5e:6b:5a:76:aa:54:85:07:71:dd:e2:
ad:8f:05:3e:bc:1b:d2:6a:16:81:23:ad:d2:d6:5b:bc:05:b3:
de:da:91:a4
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUKpWIaANcCkluqUC/ULKBvk+zQqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTFaFw0yMzEyMjAxNjU2NTFaMDMxMTAvBgNV
BAMTKERBQ0I2MDYxREVCQzIxNEFDQzY1MzZCQzZGQUQ1NjU0QzgyMTBEMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSCZUAWwTyMnByCBYGb6uiGtt
qY+BZZhDq7xpN+j41fz6YPWYoVIQQsTS0MljlCmQXyIBp3IH1icsJsfI9JvY+CX5
lTtz3SxusZyhAMpW6oELvcjBdeZEaHshGZ1KPRBMGehOWUQOZmUSM+yYkeiXXQ+Q
gZ2Q3wqLHfqJ1AG29qXBBecZSdG7XhF2pu8dwdgEzpm96gRbd8/KorsfzDt5CsNT
1mtZjz5HeUgZbSdDuW2XjvrAI0jCjAIlmYuP6zUtEYcVpdmr5YOGyvGN9LAJ3/Bh
SIIgJXXNX4cmUCiP4qQusRHJww2c2i4i7/1qFeY5zB8pRAgamZ65eKvnTVu5AgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQU2stgYd68IUrMZTa8b61WVMghDS8wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAz
NTc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAAjASAwcFKgagBSAgAwcEKgagBSLAMA0GCSqGSIb3DQEBCwUAA4IB
AQB6hz4JqRz/rSh7q+P0lREs50PGJSuczZE29M//yjZau/rhG/CbX+moQRYnU0zc
j/sY1+drSUgFdBSJuC6riyTgUtEj+qwXsl6u6ETk5GA6KIimQNCOYa+Ax0SSTOZq
JY5qDqK7+thUSnkzoC4v868n2Lm+Bs9ESvEvSaTgMEj4pCK2HwKIlKgNHjvbKsVD
F+9xAL9d6xvXl3RXJsq1P4I7iUKYAGfkCVyI0yElWTj9HmZeuLWCVgBqmzRJKDyp
8WdRF7WWOMtms6P1stx+0uIFwzUPj1Isd6pjQc0d4RKbXmtadqpUhQdx3eKtjwU+
vBvSahaBI63S1lu8BbPe2pGk
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:46 2025 by rpki-client